This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/6d729e-e16b-41a9-9012-014c70977d49/1/UqWb8EMIAwY1n1opSR9UWwcFHAU.mft File: UqWb8EMIAwY1n1opSR9UWwcFHAU.mft (raw, json) Hash identifier: s7gvbo2szQ5x7mTgUx5rZfkhjmBdSepWF81x4nlJfrY= Subject key identifier: 47:F9:C3:A0:62:7A:2B:33:34:CA:72:A8:53:7D:53:B8:F5:99:3E:63 Authority key identifier: 52:A5:9B:F0:43:08:03:06:35:9F:5A:29:49:1F:54:5B:07:05:1C:05 Certificate issuer: /CN=52a59bf043080306359f5a29491f545b07051c05 Certificate serial: 019B3E6D3607713F815E9AD8E5663D8B2003 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UqWb8EMIAwY1n1opSR9UWwcFHAU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/6d729e-e16b-41a9-9012-014c70977d49/1/UqWb8EMIAwY1n1opSR9UWwcFHAU.mft Manifest number: 1789 Signing time: Sun 21 Dec 2025 01:01:43 +0000 Manifest this update: Sun 21 Dec 2025 01:01:43 +0000 Manifest next update: Mon 22 Dec 2025 01:01:43 +0000 Files and hashes: 1: GvWU7eZamVvazZtWUoco1OLF2MQ.roa (hash: 9kEJ/d7rwclzCBcSORu1ByXHG+IDCNPxceZqglg+1Hw=) 2: UqWb8EMIAwY1n1opSR9UWwcFHAU.crl (hash: aI7jzvxZuc3YysRQ50/xH2DEwihXfhihAik70CrHhhM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/6d729e-e16b-41a9-9012-014c70977d49/1/UqWb8EMIAwY1n1opSR9UWwcFHAU.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/6d729e-e16b-41a9-9012-014c70977d49/1/UqWb8EMIAwY1n1opSR9UWwcFHAU.mft rsync://rpki.ripe.net/repository/DEFAULT/UqWb8EMIAwY1n1opSR9UWwcFHAU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6d:36:07:71:3f:81:5e:9a:d8:e5:66:3d:8b:20:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52a59bf043080306359f5a29491f545b07051c05 Validity Not Before: Dec 21 01:01:43 2025 GMT Not After : Dec 22 01:01:43 2025 GMT Subject: CN=47f9c3a0627a2b3334ca72a8537d53b8f5993e63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:37:b3:1a:f6:e0:5e:c7:fb:8a:d2:ba:bb:3c: 8b:d5:91:a4:a9:03:cb:1c:05:3a:69:7c:20:bc:b6: 51:26:87:d2:d8:0f:ce:94:8e:df:1e:fe:c4:e5:c8: ff:72:0c:c9:ad:b0:25:3e:77:d7:57:61:2d:fd:a1: c3:66:b9:41:99:b7:ba:1a:f7:06:0b:21:be:30:d2: 6a:b5:43:b2:90:24:45:ba:de:73:bd:58:93:7e:dc: 6d:e7:c2:63:64:ee:4e:1b:3f:2d:2f:0a:c7:12:2a: ce:3c:f7:81:49:37:52:65:a6:71:7c:b4:74:2a:99: eb:b8:a6:d4:c0:b7:8c:b3:15:58:55:b6:f8:3c:19: 83:26:d5:50:3d:64:79:b2:a8:17:50:dd:71:98:4c: 2f:50:d2:10:78:9b:0c:a6:aa:38:c9:3e:38:0a:cc: 62:b5:52:23:ea:c9:9c:c9:f5:63:b3:ad:9f:f0:c3: f7:92:1b:6b:c1:cf:48:2e:3b:12:93:f6:43:61:09: c0:01:f3:8a:87:3c:c6:3a:e4:ec:c3:7e:09:65:f7: f0:63:3f:2b:b1:14:9d:d1:a6:7f:a5:09:4f:49:a3: 54:fb:85:8b:a7:e7:5d:cc:19:a2:3a:a4:08:c6:ff: 2d:4e:91:4d:2f:fa:ad:15:63:8c:2b:00:6e:19:88: 5f:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:F9:C3:A0:62:7A:2B:33:34:CA:72:A8:53:7D:53:B8:F5:99:3E:63 X509v3 Authority Key Identifier: keyid:52:A5:9B:F0:43:08:03:06:35:9F:5A:29:49:1F:54:5B:07:05:1C:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UqWb8EMIAwY1n1opSR9UWwcFHAU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/6d729e-e16b-41a9-9012-014c70977d49/1/UqWb8EMIAwY1n1opSR9UWwcFHAU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/6d729e-e16b-41a9-9012-014c70977d49/1/UqWb8EMIAwY1n1opSR9UWwcFHAU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:46:c4:4f:e0:97:ca:2a:c4:47:08:1d:e1:ca:ef:7e:58:67: 33:43:c8:7d:ae:89:ad:4f:64:e5:fc:72:a6:25:3d:c8:8a:db: 97:dc:a3:db:88:6c:71:1d:b6:2b:d7:13:bb:71:42:92:2e:0a: 01:9b:70:d6:22:6e:92:bc:ac:ce:cf:6f:59:2f:cb:cb:0c:fb: a7:3b:9b:91:5a:6f:cf:b8:5a:c7:41:fb:4b:ed:52:2a:99:0e: a9:0d:2a:27:30:e7:8d:2b:60:ce:ba:e4:90:fe:7f:e9:a4:a5: 0b:cd:7a:c9:1b:c5:64:df:ed:c8:1a:d3:72:cd:98:4a:d3:4b: cb:16:59:6e:01:a2:09:ce:68:59:ea:f7:6c:ba:d3:3b:58:ef: d5:33:6f:eb:ba:9d:cc:54:9c:34:75:b7:92:7f:be:49:2e:19: 47:e3:68:8a:9f:28:f4:71:4d:55:35:ea:82:cf:24:b6:26:92: 93:fb:4c:40:c2:e2:c2:6c:1a:ec:0b:5b:b7:36:92:eb:53:79: a7:7a:2a:d7:ef:82:23:a2:54:f5:1d:42:45:ff:88:ea:8e:a5: 38:a4:3f:e8:b0:cd:9b:c6:1c:d1:d3:04:0e:c8:55:a0:69:05: be:af:25:92:ab:08:36:0b:ae:f8:89:ea:9b:ed:3a:de:1f:04: 41:7a:4f:1e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bTYHcT+BXprY5WY9iyADMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyYTU5YmYwNDMwODAzMDYzNTlmNWEyOTQ5MWY1NDViMDcw NTFjMDUwHhcNMjUxMjIxMDEwMTQzWhcNMjUxMjIyMDEwMTQzWjAzMTEwLwYDVQQD Eyg0N2Y5YzNhMDYyN2EyYjMzMzRjYTcyYTg1MzdkNTNiOGY1OTkzZTYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtTezGvbgXsf7itK6uzyL1ZGkqQPL HAU6aXwgvLZRJofS2A/OlI7fHv7E5cj/cgzJrbAlPnfXV2Et/aHDZrlBmbe6GvcG CyG+MNJqtUOykCRFut5zvViTftxt58JjZO5OGz8tLwrHEirOPPeBSTdSZaZxfLR0 KpnruKbUwLeMsxVYVbb4PBmDJtVQPWR5sqgXUN1xmEwvUNIQeJsMpqo4yT44Csxi tVIj6smcyfVjs62f8MP3khtrwc9ILjsSk/ZDYQnAAfOKhzzGOuTsw34JZffwYz8r sRSd0aZ/pQlPSaNU+4WLp+ddzBmiOqQIxv8tTpFNL/qtFWOMKwBuGYhfIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEf5w6BieiszNMpyqFN9U7j1mT5jMB8GA1UdIwQY MBaAFFKlm/BDCAMGNZ9aKUkfVFsHBRwFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXFXYjhFTUlBd1kxbjFvcFNSOVVXd2NGSEFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy82ZDcyOWUtZTE2Yi00MWE5LTkwMTIt MDE0YzcwOTc3ZDQ5LzEvVXFXYjhFTUlBd1kxbjFvcFNSOVVXd2NGSEFVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy82ZDcyOWUtZTE2Yi00MWE5LTkwMTItMDE0YzcwOTc3ZDQ5 LzEvVXFXYjhFTUlBd1kxbjFvcFNSOVVXd2NGSEFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASUbET+CX yirERwgd4crvflhnM0PIfa6JrU9k5fxypiU9yIrbl9yj24hscR22K9cTu3FCki4K AZtw1iJukryszs9vWS/Lywz7pzubkVpvz7hax0H7S+1SKpkOqQ0qJzDnjStgzrrk kP5/6aSlC816yRvFZN/tyBrTcs2YStNLyxZZbgGiCc5oWer3bLrTO1jv1TNv67qd zFScNHW3kn++SS4ZR+Noip8o9HFNVTXqgs8ktiaSk/tMQMLiwmwa7AtbtzaS61N5 p3oq1++CI6JU9R1CRf+I6o6lOKQ/6LDNm8Yc0dMEDshVoGkFvq8lkqsINguu+Inq m+063h8EQXpPHg== -----END CERTIFICATE-----Generated at Sun Dec 21 10:32:39 2025 by rpki-client